Skip to content

Non-admins cannot access the workflow management page /blocks/workflow/manage.php #12

@abias

Description

@abias

Steps to reproduce:

  • Login as admin
  • Go to the roles management page and edit the manager role
  • Add all block/workflow:* capabilities to the manager role, but make especially sure that you add the block/workflow:editdefinitions capability
  • Login as manager

Expected result:

  • If you go to Site administration -> Plugins, you will see the "Blocks" section and a "Workflow" link within it
  • If you go directly to /blocks/workflow/manage.php, you will be able to edit the workflows of this plugin

Actual result:

  • If you go to Site administration -> Plugins, you will not a "Workflow" link
  • If you go directly to /blocks/workflow/manage.php, you will get a "Access denied" exception

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions